From patchwork Fri Aug 21 12:37:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Florian Weimer X-Patchwork-Id: 141916 X-Patchwork-Delegate: carlos@redhat.com Return-Path: X-Original-To: patchwork@sourceware.org Delivered-To: patchwork@sourceware.org Received: from vm01.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 118744BB1C04 for ; Fri, 21 Aug 2026 12:37:48 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 118744BB1C04 Authentication-Results: sourceware.org; dkim=pass (1024-bit key, unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=VSS5KD2w X-Original-To: libc-alpha@sourceware.org Delivered-To: libc-alpha@sourceware.org Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by sourceware.org (Postfix) with ESMTP id 355F04BA9008 for ; Fri, 21 Aug 2026 12:37:16 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 355F04BA9008 Authentication-Results: sourceware.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 355F04BA9008 Authentication-Results: sourceware.org; arc=none smtp.remote-ip=170.10.133.124 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1787315836; cv=none; b=Gts+N8Oi6K50QPBhymywQteEZ0gzVql6s+dXCuM/Pc/h9oy5ugMqBeCkdUrl8Fzk6FIF/uQgtbfZ3p4UmGfo2rvZYoQuJk8vkLYPKoIZVtDCXkRwvUBfduBflQB55HsfU5haux/IFPQjD4xRiH/gUdSRT63Fa8m2nWj2WMZrADk= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1787315836; c=relaxed/simple; bh=2BQ8TgMbO9pnslOZJxrb3e8T1jc6amrPFHBdZTnRAGA=; h=DKIM-Signature:From:To:Subject:Message-ID:Date:MIME-Version; b=nUj6SrR1vdTZ4n0iliMJwY+jn8QO9FTxE+yaLIysQixcda9FYW2Q7kWtrkbsgmO+vO7WW4YymfQXPdtJ7zM4rkUi7It6qpkOY40xPQ1g3T8bqGrm06yotuNCANwHYbcXdLcJFEiDkb8/SEnbnfKyEkZeQHh4/yg6/TIadUQyipk= ARC-Authentication-Results: i=1; sourceware.org; dkim=pass (1024-bit key, unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=VSS5KD2w DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 355F04BA9008 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1787315835; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=NUQiTfw8kCv+3qakF3QA7P0zom18kymz93ezfk9OsIs=; b=VSS5KD2w/7MC1lPG9G8xQ5jRD8e9FAU+sSr/wiERXROG4WDa+1gDhoCcIkOkFLVKHcF7Jj FVrpNr8CYzellOpA/32+vKa2AtmdVRWwjd9jLYjYXiqX36liLPH/dcUJLUdDYG4bXphKKu /3Xw+Q9WzbEvx4XoNRPHd+H/ew6myrI= Received: from mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-184-GjGxrpBiN06Xz_WVHqm0hQ-1; Fri, 21 Aug 2026 08:37:11 -0400 X-MC-Unique: GjGxrpBiN06Xz_WVHqm0hQ-1 X-Mimecast-MFC-AGG-ID: GjGxrpBiN06Xz_WVHqm0hQ_1787315830 Received: from mx-prod-int-10.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-10.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.95]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id D2F831955DAA for ; Fri, 21 Aug 2026 12:37:10 +0000 (UTC) Received: from fweimer-thinkpadp1gen4i.stuttmso.csb (headnet05.pony-001.prod.iad2.dc.redhat.com [10.2.32.117]) by mx-prod-int-10.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 431CD423 for ; Fri, 21 Aug 2026 12:37:10 +0000 (UTC) From: Florian Weimer To: libc-alpha@sourceware.org Subject: [PATCH v2 1/2] iconvdata: JISX0213 decoding lacks pending character reset (CVE-2026-77117) Message-ID: <786cdc01ff46194a1cc464aa23f80075a9a31c65.1787315777.git.fweimer@redhat.com> X-From-Line: 786cdc01ff46194a1cc464aa23f80075a9a31c65 Mon Sep 17 00:00:00 2001 Date: Fri, 21 Aug 2026 14:37:08 +0200 User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.6 on 10.30.177.95 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: YGNu9KeQM98ba3Y05I-yD8pOhQjKADS5moWQC9Mc_1E_1787315830 X-Mimecast-Originator: redhat.com X-Spam-Status: No, score=-9.4 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, GIT_PATCH_0, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL, RCVD_IN_SBL_CSS, SPF_HELO_PASS, SPF_NONE, TXREP shortcircuit=no autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: libc-alpha-bounces~patchwork=sourceware.org@sourceware.org This fixes bug 34556. --- v2: Also fix the EUC bug (which was not mentioned in the AISLE report). iconvdata/euc-jisx0213.c | 3 +++ iconvdata/shift_jisx0213.c | 3 +++ 2 files changed, 6 insertions(+) base-commit: 6467136459cc86a4426e35ac8d8f9de4673b9f1f diff --git a/iconvdata/euc-jisx0213.c b/iconvdata/euc-jisx0213.c index 5572bbdb7b..61c22231e1 100644 --- a/iconvdata/euc-jisx0213.c +++ b/iconvdata/euc-jisx0213.c @@ -224,6 +224,9 @@ STANDARD_FROM_LOOP_ERR_HANDLER (1); \ } \ } \ + else \ + /* There was a pending character. Clear it. */ \ + *statep = 0; \ \ put32 (outptr, ch); \ outptr += 4; \ diff --git a/iconvdata/shift_jisx0213.c b/iconvdata/shift_jisx0213.c index 61c9c3ce6d..e9179f605e 100644 --- a/iconvdata/shift_jisx0213.c +++ b/iconvdata/shift_jisx0213.c @@ -226,6 +226,9 @@ STANDARD_FROM_LOOP_ERR_HANDLER (1); \ } \ } \ + else \ + /* There was a pending character. Clear it. */ \ + *statep = 0; \ \ put32 (outptr, ch); \ outptr += 4; \